New Sessions/sec: 170,000 (FTD, with AVC); 500,000 (ASA)
Interfaces: 8x 1GBASE-T RJ-45 + 8x 1/10G SFP+ (integrated); up to 24 total Ethernet ports with network modules; 1x 1/10G SFP management port; max 7,000 VPN peers
Form Factor: 1RU rack-mount; 1.75 x 17 x 20 in; single 400W AC PSU (dual optional)
Curation Review
✔ Pros:Up to 22 Gbps stateful firewall throughput in a compact 1RU chassis; 4 million concurrent sessions and 170,000 new connections/sec for high-density traffic; Supports both ASA and FTD (Threat Defense) software images for deployment flexibility; Integrated 8x 1GbE copper and 8x 10G SFP+ ports with expansion modules for up to 24 ports; Hardware VPN offload raises IPsec throughput to 13.5-15.4 Gbps and supports up to 7,000 VPN peers; Redundant power supply option available
✘ Cons:Only about 21 Gbps threat-prevention throughput, which is modest for full inspection on high-speed links; IPsec VPN throughput without offload is only 10 Gbps; Limited to 10G maximum port speed with no 25G/40G/100G options; Pricing is high relative to newer-generation platforms, and no official Cisco list price is published; Cisco has announced end-of-sale timelines for the 3100 series, so buyers should check lifecycle status before purchase; Ports are not PoE and the device has no built-in Wi-Fi or switching features